03dd8b16f11ec134e2fe0ed33dc2694f28e33f544970bac25a43d871f1e4ec7c

Sharing

Copy URL

Twitter E-mail

General

Target

03dd8b16f11ec134e2fe0ed33dc2694f28e33f544970bac25a43d871f1e4ec7c
Size

4.1MB
MD5

84cda9398cdf366718b860cde77cba83
SHA1

88c6f1ad9cf2c4033a5a09c47536a9d36b541e27
SHA256

03dd8b16f11ec134e2fe0ed33dc2694f28e33f544970bac25a43d871f1e4ec7c
SHA512

f0ac628d3b26910407f2f29885f0bb46082db9772d0315b1a268824618435f24fe67abee3ab963182896ef958843a0b8efe9fa1c9843100f846aae0b3ae80026
SSDEEP

98304:HzxqG1SKmYd/2qZKw/env6faT3uP9cVXQqxxnxFi0H:TxqG1StYduqZKw/enS2BxtH

Score

N/A

Malware Config

Signatures

Files

03dd8b16f11ec134e2fe0ed33dc2694f28e33f544970bac25a43d871f1e4ec7c
.exe windows x86

786d17afd21551fd45869191bfebc781

Code Sign

b9:e1:4b:24:dc:40:dd:d9:99:28:08:f2:3f:28:b5:f1
Certificate

Issuer

POSTALCODE=10305

Not Before

04-10-2022 19:46

Not After

04-10-2023 19:46

Subject

POSTALCODE=10305

8f:ad:af:d4:e4:29:21:34:ec:c4:95:ee:6b:ac:03:42:00:18:b2:da:96:ff:3a:5c:03:30:11:09:44:b7:e4:53
Signer

Actual PE Digest

8f:ad:af:d4:e4:29:21:34:ec:c4:95:ee:6b:ac:03:42:00:18:b2:da:96:ff:3a:5c:03:30:11:09:44:b7:e4:53

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

POSTALCODE=10305

03-10-2022 12:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
OpenWaitableTimerA
CreateEventW
ReadConsoleInputW
WaitNamedPipeA
SetVolumeMountPointA
GetSystemTimeAdjustment
FindNextFileW
EnumResourceTypesW
FindResourceExA
AddVectoredExceptionHandler
BeginUpdateResourceA
GetConsoleTitleW
TransmitCommChar
GetCPInfoExA
EnumResourceTypesA
GetModuleFileNameA
IsBadHugeWritePtr
GetConsoleAliasExesLengthA
WriteConsoleW
EnumCalendarInfoExA
LoadLibraryW
DeleteFileW
SearchPathW
VirtualAlloc
WriteConsoleOutputCharacterA
GetConsoleAliasA
GetModuleHandleA
GetPrivateProfileStringW
PeekConsoleInputA
GlobalGetAtomNameA
GetProcAddress
SetFileShortNameA
SetCalendarInfoW
SetComputerNameA
GetFileAttributesW
GetVolumePathNameA
FindFirstChangeNotificationW
GetFileType
SetFileShortNameW
FindFirstFileExW
GetVolumeInformationA
AddAtomA
GetProfileIntA
SetFileAttributesA
AllocConsole
SetConsoleTextAttribute
CreateJobObjectA
CreateMutexA
GetNumaHighestNodeNumber
GetBinaryTypeW
GetLongPathNameA
FoldStringW
FindNextFileA
OpenWaitableTimerW
ResetEvent
GlobalWire
GetComputerNameA
GetVersionExW
VirtualProtect
GlobalAlloc
GetSystemDefaultLCID
GetLastError
GetShortPathNameA
LoadLibraryA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetStartupInfoW
HeapAlloc
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
Sleep
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
ReadFile
InitializeCriticalSectionAndSpinCount
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
FlushFileBuffers
CreateFileA
CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

786d17afd21551fd45869191bfebc781

Code Sign

b9:e1:4b:24:dc:40:dd:d9:99:28:08:f2:3f:28:b5:f1Certificate

8f:ad:af:d4:e4:29:21:34:ec:c4:95:ee:6b:ac:03:42:00:18:b2:da:96:ff:3a:5c:03:30:11:09:44:b7:e4:53Signer

Signature Validations

Verification

03-10-2022 12:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

ole32

Sections

.text Size: 88KB - Virtual size: 88KB

.data Size: 3.9MB - Virtual size: 4.2MB

.rsrc Size: 86KB - Virtual size: 4.2MB

.reloc Size: 18KB - Virtual size: 17KB

b9:e1:4b:24:dc:40:dd:d9:99:28:08:f2:3f:28:b5:f1
Certificate

8f:ad:af:d4:e4:29:21:34:ec:c4:95:ee:6b:ac:03:42:00:18:b2:da:96:ff:3a:5c:03:30:11:09:44:b7:e4:53
Signer

03-10-2022 12:52
Valid: false

.text
Size: 88KB - Virtual size: 88KB

.data
Size: 3.9MB - Virtual size: 4.2MB

.rsrc
Size: 86KB - Virtual size: 4.2MB

.reloc
Size: 18KB - Virtual size: 17KB